[病毒样本] 1

显示全部楼层 · 发表于 2008-6-8 19:44:50

VirSCAN.org Scanned Report :
Scanned time : 2008/06/08 19:37:04 (CST)
Scanner results: 47%的杀软(17/36)报告发现病毒
File Name    : cao.rar
File Size    : 25798 byte
File Type    : RAR archive data, v1d, os
MD5          : daa733dc7278d18ef25d600715cf253e
SHA1          : ff7a5fed712ee4cfd38e5803344d827fa588b589
Online report  : http://virscan.org/report/24e61b09d1cafb9143cfa386b45fc83d.html
Scanner       Engine Ver    Sig Ver          Sig Date Time Scan result
a-squared    3.5.0.18       2008.06.07       2008-06-07  5.33 -
安博士V3    2008.06.06.00 2008.06.06       2008-06-06  2.79 -
AntiVir       7.8.0.55       7.0.4.156       2008-06-06  15.31  HEUR/Malware
Arcavir       1.0.4          200806071710    2008-06-07  7.23 Heur.Win32.I
AVAST       1.0.8          080608-0       2008-06-08  13.10  -
AVG          7.5.51.442    270.0.0/1489    2008-06-07  11.81  -
BitDefender 7.60825.1256901 7.19406          2008-06-08  19.57  Dropped:Generic.Malware.P!BdldPk!g.75219401
CA (VET)    9.0.0.143    31.6.5858       2008-06-08  13.61  -
ClamAV       0.93          7402             2008-06-08  0.03 PUA.Packed.UPack-2
Comodo       2.11          2.0.0.549       2008-06-08  4.30 -
CP Secure    1.1.0.715    2008.06.08       2008-06-08  25.39  -
Dr.WEB       4.44.0.9170    2008.06.08       2008-06-08  18.74  MULDROP.Trojan
ewido       4.0.0.2       2008.06.07       2008-06-07  6.12 -
F-PROT       4.4.1.52       20080608       2008-06-08  14.65  Possible W32/Agent.L.gen!Eldorado (damaged, not disinfectable)
F-SECURE    5.51.6100    2008.06.08.01    2008-06-08  15.72  -
飞塔          2.81-3.11    9.179          2008-06-08  2.98 Suspicious
ViRobot       20080607       2008.06.07       2008-06-07  0.92 -
IKARUS       T3.1.01.26    2008.06.08.70886  2008-06-08  10.78  -
江民杀毒    11.0.706       2008.06.08       2008-06-08  2.33 Trojan/Agent.avdb
卡巴斯基    5.5.10       2008.06.08       2008-06-08  34.03  -
金山毒霸    2008.1.14.15 2008.6.8.15    2008-06-08  1.69 -
迈克菲       5.2.00       5312             2008-06-06  17.90  New Malware.aj
Microsoft    1.3604       2008.06.08       2008-06-08  9.21 TrojanDropper:Win32/Idicaf.A
MKS_VIR       2.01          2008.06.06       2008-06-06  13.97  Heur.Win32
NORMAN       5.92.08       5.92.00          2008-06-06  20.57  W32/Suspicious_U.gen
熊猫卫士    9.04.03.0001 2008.06.06       2008-06-06  4.72 -
趋势          8.700-1004    5.330.01       2008-06-08  2.02 -
Prevx       V2             20080608       2008-06-08  6.42 -
QuickHeal    9.00          2008.06.07       2008-06-07  1.03 -
瑞星          20.0          20.47.42.00    2008-06-06  2.71 -
SOPHOS       2.74.1       4.30             2008-06-08  13.91  Mal/Behav-112
赛门铁克    1.3.0.24       20080607.003    2008-06-07  0.48 -
nProtect    2008-06-05.00 1534841          2008-06-05  5.96 Trojan/W32.Small.13012
The Hacker    6.2.92       v00339          2008-06-06  1.91 W32/Behav-Heuristic-060
VBA32       3.12.6.7       20080608.0641    2008-06-08  16.88  Win32 Shadow Service Install (suspicious)
VirusBuster 4.3.19:9       9.131.3/11.0    2008-06-07  7.75 Packed/Upack

显示全部楼层 · 发表于 2008-6-8 19:52:07

RS20.47.60未杀！

显示全部楼层 · 发表于 2008-6-8 19:58:36

VBA32报的最好听

outpost还是

显示全部楼层 · 发表于 2008-6-8 20:00:36

We received the following archive files:
File ID    Filename Size (Byte) Result
25039834    cao.rar 25.19 KB OK

A listing of files contained inside archives alongside their results can be found below:
File ID    Filename Size (Byte) Result
25039835    cao.exe    25.13 KB    UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:
Filename Result
cao.exe    UNDER ANALYSIS

显示全部楼层 · 发表于 2008-6-8 20:10:15

kav 0

显示全部楼层 · 发表于 2008-6-8 20:32:23

显示全部楼层 · 发表于 2008-6-8 20:48:08

[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\cao.rar->cao.exe->(UPack)

---------------------------------------------------------------------
Scan ended: 2008-6-8, 20:47:51
Duration: 0:00:02

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-6-8 20:49:20

找不到所请求的 URL

在尝试检索 URL 时:

http://bbs.kafan.cn/attachment.php?aid=
281963&k=fe15d6f41838f690f4d9b13ecb55393
9&t=1212929235

遇到了下列错误:

所请求的对象已被感染了下列病毒: Heur.AntiAV

如果您认为这是不正确的,请联系您的服务提供商。
生成于:
Sun Jun 08 20:48:21 2008
Kaspersky Internet Security 2009

显示全部楼层 · 发表于 2008-6-8 21:03:15

卡巴又启发

已隔离：病毒 Heur.AntiAV (修改) 文件　: D:\软件\其它\v\k\cao.rar/cao.exe

TO KL

卡巴未回信，但更新后……

已删除：木马程序 Trojan-PSW.Win32.OnLineGames.anxg 文件　: D:\软件\其它\v\k\cao.rar/cao.exe//PE_Patch//UPack//#//PE_Patch//UPack

[ 本帖最后由 sbbdms 于 2008-6-9 14:04 编辑 ]

显示全部楼层 · 发表于 2008-6-8 21:16:26

对象: cao.exe
在压缩档案里: F:\cao.rar
Status: 已发现病毒
病毒: Dropped:Generic.Malware.P!BdldPk!g.75219401 (BD 引擎

[病毒样本] 1

本帖子中包含更多资源

3/0

本帖子中包含更多资源

本帖子中包含更多资源

F-Prot 4.4.4